Archive
February 2020
Vulnerabilities first published in this month (UTC), newest first.
1,406 results · Feed
-
Unscored —
RiskNet Acquirer before hotfix 6.0 b7+ADHOC-443 ApplicationServiceBean contains a service information disclosure.
-
Unscored —
QNAP VioCard 300 has hardcoded RSA private keys.
-
Unscored —
TRENDnet TS-S402 has a backdoor to enable TELNET.
-
Unscored —
Xerox ColorCube and WorkCenter devices in 2013 had hardcoded FTP and shell user accounts.
-
Unscored —
Internet TRiLOGI Server (unknown versions) could allow a local user to bypass security and create a local user account.
-
Unscored —
OpenConnect VPN client with GnuTLS before 5.02 contains a heap overflow if MTU is increased on reconnection.
-
High 8.8
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Moxa MGate 5105-MB-EI…
-
High 7.8
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.7.0.29…
-
High 7.8CVE-2020-8856 EPSS 20%
This vulnerability allows remote atackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.6.0…
-
High 7.8
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.…
-
High 7.8
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.…
-
High 7.8
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.…
-
Low 3.3
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader …
-
High 7.8
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.7.0.29…
-
High 7.8
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.7.0.29…
-
High 7.8
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.7.0.29…
-
High 7.8
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.7.0.29…
-
High 7.8
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.7.0.29…
-
High 7.8CVE-2020-8845 EPSS 19%
This vulnerability allows remote atackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.6.0…
-
High 7.8CVE-2020-8846 EPSS 20%
This vulnerability allows remote atackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.6.0…
-
High 7.8CVE-2020-8844 EPSS 24%
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.6.0.25…
-
Unscored —
Belkin n750 routers have a buffer overflow.
-
Unscored —
MobileIron VSP < 5.9.1 and Sentry < 5.0 has an insecure encryption scheme.
-
Unscored —
Microsys PROMOTIC 8.2.13 contains an ActiveX Control Start Buffer Overflow vulnerability which can lead to denial of se…
-
Unscored —
A denial of service vulnerability exists in some motherboard implementations of Intel e1000e/82574L network controller …
-
Unscored —
Multiple security bypass vulnerabilities in the editAnswer, deleteAnswer, addAnswer, and deletePoll functions in WordPr…
-
Unscored —
The Voatz application 2020-01-01 for Android allows only 100 million different PINs, which makes it easier for attacker…
-
Unscored —
In the Voatz application 2020-01-01 for Android, the amount of data transmitted during a single voter's vote depends on…
-
Unscored —
Multiple SQL injection vulnerabilities in CWPPoll.js in WordPress Poll Plugin 34.5 for WordPress allow attackers to exe…
-
Unscored —
Directory traversal vulnerability in Kaseya Virtual System Administrator (VSA) 7.0.0.0 before 7.0.0.33, 8..0.0.0 before…
-
Unscored —
Authentication bypass using an alternate path or channel in SimpliSafe SS3 firmware 1.4 allows a local, unauthenticated…
-
Unscored —
Directory traversal vulnerability in node/utils/Minify.js in Etherpad 1.1.2 through 1.5.4 allows remote attackers to re…
-
Unscored —
A Denial of Service vulnerability exists in askpop3d 0.7.7 in free (pszQuery),
-
Unscored —
Zend_XmlRpc Class in Magento before 1.7.0.2 contains an information disclosure vulnerability.
-
Unscored —
A vulnerability exists in Netgear CG3100 devices before 3.9.2421.13.mp3 V0027 via an embed malicious script in an unspe…
-
Unscored —
A Privilege Escalation Vulnerability exists in Free Reprintables ArticleFR 11.06.2014 due to insufficient access restri…
-
Unscored —
Squirrelmail 4.0 uses the outdated MD5 hash algorithm for passwords.
-
Unscored —
A Two-Factor Authentication Bypass Vulnerability exists in BS-Client Private Client 2.4 and 2.5 via an XML request that…
-
Unscored —
Improper Authentication in subsystem in Intel(R) CSME versions 12.0 through 12.0.48 (IOT only: 12.0.56), versions 13.0 …
-
Unscored —
Improper initialization in the Intel(R) SGX SDK before v2.6.100.1 may allow an authenticated user to potentially enable…